Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 4wPMsb2+c/BzmV6y/FQrHWzKocOeUeClpCyP4Jsi8Zk=
Subject key identifier: 02:7C:3C:1D:55:20:93:C2:2E:BA:83:6D:30:BD:E4:84:A4:B1:D1:D0
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 01974EC5AD3339D35612C6828611E6A28EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 09:01:07 +0000
Manifest this update: Sun 08 Jun 2025 09:01:07 +0000
Manifest next update: Mon 09 Jun 2025 09:01:07 +0000
Files and hashes: 1: TOzNLtk2EcFN8tWWUcBYc6SMW8E.roa (hash: q/YjRgOTnjUrtQ6qzvmbEUmVOXxgxmvQW4n5HH9vrjQ=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: GdwqeriefJc9KGpDT/j300y/1/PXHMkCwtOwLU7L1ac=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:ad:33:39:d3:56:12:c6:82:86:11:e6:a2:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Jun 8 09:01:07 2025 GMT
Not After : Jun 9 09:01:07 2025 GMT
Subject: CN=027c3c1d552093c22eba836d30bde484a4b1d1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:ba:85:40:38:c5:d4:e0:06:94:4b:ab:09:
41:12:01:1f:01:15:63:24:7f:84:8b:2b:9a:6c:bf:
6b:99:30:e5:af:45:14:4d:ff:5f:81:81:e1:a4:87:
46:da:a9:a3:cd:da:b9:e1:07:b6:a5:d7:e6:d1:fa:
f8:80:74:49:12:4c:b6:a2:f2:a6:1f:12:76:38:e2:
52:b5:3c:db:60:73:87:f8:68:dc:16:bd:27:80:bc:
ee:a4:44:f7:af:e2:7e:49:25:d0:77:1b:c0:93:db:
6b:b6:de:77:ba:f6:30:9a:71:fd:fc:44:76:46:e0:
51:21:8a:7a:aa:e2:15:6e:26:2b:66:b2:0e:9a:bd:
58:2d:e0:6d:bb:5b:05:bc:2d:44:f0:30:6c:a0:75:
63:a5:db:d9:44:0b:a1:25:73:a0:a0:46:0b:fd:ae:
34:2b:05:1a:4d:36:0c:9b:2d:24:8f:2a:88:9f:b8:
1f:76:34:83:ac:1a:15:4f:f8:b4:63:b2:1d:00:95:
83:d3:5b:aa:c7:cb:95:74:8c:ee:38:39:33:d8:25:
71:b4:20:35:94:21:35:36:13:49:28:9a:55:a5:4e:
80:57:a9:34:88:2a:5a:2c:24:72:73:8c:78:d2:17:
31:58:a7:cc:d5:77:47:a2:b7:d2:70:4d:a3:1c:f9:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:3C:1D:55:20:93:C2:2E:BA:83:6D:30:BD:E4:84:A4:B1:D1:D0
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:05:8f:2d:e2:a7:34:10:0a:bb:6e:ea:0b:61:47:a5:70:
36:0f:3d:e7:77:a6:08:b3:79:5f:5e:6d:1b:89:f7:cb:c3:a8:
cd:7c:bc:49:4b:69:cb:b1:58:f1:ac:e1:96:b0:8f:7f:4f:84:
d8:3f:88:7b:e7:30:77:a5:17:bc:63:39:c5:88:97:70:46:59:
b4:e2:b0:51:41:50:34:30:a5:e3:07:b6:61:e2:30:8a:cc:ab:
bb:f4:70:cc:7c:dc:f0:c5:82:35:72:33:79:bf:78:20:84:15:
28:bb:31:08:49:40:0c:f8:62:93:33:82:b1:f4:03:a6:48:e7:
3b:6e:98:c7:ea:f2:9c:6e:66:d4:0b:aa:fe:12:6b:ea:e5:7d:
f8:21:0e:8a:d1:32:07:d1:96:5d:1d:a7:93:8c:84:c6:4e:e9:
14:0a:af:eb:39:37:6e:44:c8:44:fd:cd:39:b9:35:98:46:e8:
ff:ca:d4:ad:12:2c:13:f1:64:e1:af:7c:12:ce:88:e3:2d:3e:
20:6d:c0:bf:2c:74:1d:7f:99:7b:ff:0e:3c:d6:f8:84:2a:ee:
ae:4f:5f:63:73:45:dd:b0:f9:b7:4a:23:47:f9:ff:6d:04:70:
3c:31:be:27:0a:79:90:6d:0a:55:a8:38:23:18:13:73:c0:06:
ed:0c:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:51 2025 by rpki-client